CVE-2023-4863

CVE-2023-4863 root@kitploit: checkout webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ checkout vulnerable version git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 enable AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix build...

CVE-2023-4683-Test

CVE-2023-4683-Test This repo holds an easy to use POC for CVE-2023-4683. Just git clone this repo and either extract webp-test or run setup-webp-test.sh. webp-test already has the necessary files git commit 7ba44f80f3b94fc0138db159afea770ef06532a0 of https://chromium.googlesource.com/webm/libwebp...

vulnerabilidad-LibWebP-CVE-2023-41064

vulnerabilidad-LibWebP-CVE-2023-41064 longitudes de código para desencadenar esta vulnerabilidad CVE-2023-41064 Este es un script de Python que crea un archivo WebP un formato de imagen vacío con una estructura de encabezado específica. El propósito de este script es generar un archivo WebP que...

Astra Linux – Vulnerability in exempi

A buffer overflow vulnerability exists in WEBPSupport.cpp in exempi 2.5.0 and earlier, allowing remote attackers to cause a denial of service by opening crafted webp files...

EUVD-2025-25737

Malicious code in bioql PyPI...

CVE-2025-52456

A memory corruption vulnerability exists in the WebP Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .webp animation an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based...

RLSA-2024:3066 Moderate: exempi security update

Exempi provides a library for easy parsing of XMP metadata. Security Fixes: exempi: denial of service via opening of crafted audio file with ID3V2 frame CVE-2020-18651 exempi: denial of service via opening of crafted webp file CVE-2020-18652 For more details about the security issues, including t...

RHEL 8 : exempi (RHSA-2024:3066)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3066 advisory. Exempi provides a library for easy parsing of XMP metadata. Security Fixes: exempi: denial of service via opening of crafted audio file with...

Moderate: Red Hat Security Advisory: exempi security update

An update for exempi is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

exempi: denial of service via opening of crafted webp file

A buffer overflow flaw was found in the exempi package. This issue occurs in WEBPSupport.cpp and may allow remote attackers to cause a denial of service via opening a crafted webp file...

ALSA-2024:3066 Moderate: exempi security update

Exempi provides a library for easy parsing of XMP metadata. Security Fixes: exempi: denial of service via opening of crafted audio file with ID3V2 frame CVE-2020-18651 exempi: denial of service via opening of crafted webp file CVE-2020-18652 For more details about the security issues, including t...

Moderate: exempi security update

Exempi provides a library for easy parsing of XMP metadata. Security Fixes: exempi: denial of service via opening of crafted audio file with ID3V2 frame CVE-2020-18651 exempi: denial of service via opening of crafted webp file CVE-2020-18652 For more details about the security issues, including t...

RHEL 7 : exempi (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - exempi: denial of service via opening of crafted webp file CVE-2020-18652 - Buffer Overflow vulnerability...

@napi-rs/image affected by libwebp CVE

Impact Heap buffer overflow in libwebp allows a remote attacker to perform an out of bounds memory write via a crafted webp image. References - https://github.com/advisories/GHSA-j7hp-h8jx-5ppr - https://blog.isosceles.com/the-webp-0day/...

libwebp: out-of-bounds write with a specially crafted WebP lossless file

This CVE ID has been rejected by its CVE Numbering Authority. Duplicate of CVE-2023-4863...

libwebp: out-of-bounds write with a specially crafted WebP lossless file

This CVE ID has been rejected by its CVE Numbering Authority. Duplicate of CVE-2023-4863...

libwebp: out-of-bounds write with a specially crafted WebP lossless file

This CVE ID has been rejected by its CVE Numbering Authority. Duplicate of CVE-2023-4863...

libwebp: out-of-bounds write with a specially crafted WebP lossless file

This CVE ID has been rejected by its CVE Numbering Authority. Duplicate of CVE-2023-4863...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : exempi (SUSE-SU-2023:3518-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3518-1 advisory. - CVE-2020-18652: Fixed buffer overflow vulnerability in WEBPSupport.cpp bsc1214488. Tenable has extracte...

CVE-2020-18652

A buffer overflow flaw was found in the exempi package. This issue occurs in WEBPSupport.cpp and may allow remote attackers to cause a denial of service via opening a crafted webp file. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the...